Re: with firefox on X11, any page can pastejack you anytime

[Jeremy Stanley <fungi () yuggoth org>]

On 2023-10-19 17:04:10 +0100 (+0100), Sam Bull wrote:
[...]
> Also a problem with shell security. If you paste something with
> line breaks into bash, it executes them. If you paste the same
> into fish, it doesn't (it'll display the multi-line input and
> expect you to hit the enter key to execute it as a command).

That observation may be outdated. At least my bash 5.2.15 on Debian
does not execute pasted newlines, it treats it as a multi-line
command and waits for an actual enter keypress (tested inside a few
different terminal emulators including vanilla xterm, so pretty sure
it's not being mitigated at that layer).
-- 
Jeremy Stanley

Attachment: signature.asc
Description: